英国国家卫生服务遭受攻击，系统出现大面积故障

英国国家卫生服务（NHS）的111紧急服务受到网络攻击，引发重大影响。

目前，服务系统出现持续性中断，该攻击袭击了英国管理服务提供商（MSP）Advanced的系统。

United Kingdom's National Health Service (NHS) 111 emergency services are affected by a significant and ongoing outage triggered by a cyberattack that hit the systems of British managed service provider (MSP) Advanced.

 

Advanced首席运营官确认受到网络攻击

截止目前，公众暂时无法查看Advanced状态页面，Advanced首席运营官Simon Short证实，该故障事件是由当地时间周四凌晨发现的网络攻击造成。

Simon Short在BBC上发表声明称，近日发现的安全问题造成了此次服务的故障，他们可以确认，该事件与网络攻击有关，作为预防措施，Advanced立即隔离了该组织所有的健康和护理环境。

Advanced事件响应小组的早期干预已将该问题控制在少数服务器上，这些问题服务器约占Advanced使用的健康和护理基础服务器的2%。

虽然没有提供有关网络攻击性质的细节，但根据Advanced首席运营官的发言推测，此次事件可能是一个勒索软件或数据勒索攻击。Advanced为22,000多个全球客户提供商业软件服务，这些客户来自不同的行业垂直领域，从医疗保健和教育到非营利组织，MSP的客户名单包括NHS、英国工作和养老金部（DWP）以及伦敦城市机场。

While public access to Advanced's status page is now blocked by a login form allowing access only to customers and employees, Advanced's Chief Operating Officer Simon Short confirmed that the incident was caused by a cyberattack detected on Thursday morning.

"A security issue was identified yesterday, which resulted in loss of service," Short said in a statement shared with the BBC.

"We can confirm that the incident is related to a cyber-attack and as a precaution, we immediately isolated all our health and care environments.

"Early intervention from our Incident Response Team contained this issue to a small number of servers representing 2% of our Health & Care infrastructure."

While no details were provided regarding the nature of the cyberattack, based on the wording, it is likely that this was a ransomware or data extortion attack.

Advanced provides business software to more than 22,000 global customers in various industry verticals, from healthcare and education to non-profits.

The MSP's list of customers includes the NHS, the UK Department for Work and Pensions (DWP), and the London City Airport.

A spokesperson for Advanced was not immediately available for comment when contacted by BleepingComputer earlier today for more details.

根据NHS111服务的介绍页面，85% 的 NHS 111 服务都使用了Advanced 的 Adastra 客户患者管理解决方案，该解决方案与 MSP 提供的其他几项服务一起遭遇重大中断 。

近日，威尔士救护车服务中心宣称：用于将病人从威尔士的国家医疗服务体系转诊到小时外全科医生的NHS计算机系统发生重大故障，该系统是由地方卫生局用来协调病人转诊的。

此次持续的故障异常严重，该故障影响面广泛，英全境因此受到不同程度影响。

NHS建议英国公众在此次事件得到解决之前，先使用在线平台访问NHS 111紧急服务。

资料来源：

https://www.bleepingcomputer.com/news/security/uk-nhs-suffers-outage-after-cyberattack-on-managed-service-provider/

泛联新安

For Better Code

• 国内领先的开发支撑类、EDA类基础软件提供商。
• 以程序分析专家为核心能力定位，瞄准基础软件工具的国产化替代。
• 持续深耕智能程序分析、编译器技术、软件逆向分析、软件漏洞挖掘、高性能程序仿真等底层技术方向。
• 软件安全类测试产品矩阵，已形成覆盖安全漏洞检测、挖掘未知漏洞双重防护，覆盖开源组件和第三方软件组件供应链安全的行业解决方案。